Intelligence Fundamentals GCTI Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of an open-source intelligence (OSINT) collection method?

   • AConducting a penetration test against an adversary's infrastructure
   • BDeploying a honeypot to capture attacker activity
   • CMonitoring public social media posts for discussions of a new malware strain
   • DIntercepting encrypted communications between threat actors
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security manager is considering whether to use threat intelligence to justify a new security tool purchase. The manager has a limited budget and must present a business case to the CFO. The manager has collected data on recent industry attacks and the organization's current security posture. What is the most effective way to use threat intelligence in this business case?

   • AUse intelligence to demonstrate the specific threats the organization faces and how the new tool would mitigate those threats
   • BPresent raw statistics on the number of attacks in the industry
   • CDelay the purchase until a security incident occurs to justify the need
   • DRely on the vendor's marketing materials to justify the purchase
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A CTI team is developing intelligence requirements for the upcoming year. The company is a healthcare provider that stores sensitive patient data. The team has identified two potential requirements: (1) monitor for threats targeting electronic health records (EHR) systems, and (2) monitor for threats targeting the company's general IT infrastructure. The team has limited resources and must prioritize one requirement. Which requirement should the team prioritize, and why?

   • AMonitor threats targeting general IT infrastructure because it supports all other systems, including EHR.
   • BMonitor both requirements equally because both are important.
   • CMonitor threats targeting EHR systems because patient data is the company's most critical asset and a breach would have severe regulatory and reputational consequences.
   • DMonitor threats targeting general IT infrastructure because it is easier to collect data for this requirement.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement best describes the scope of cyber threat intelligence?

   • AIt is primarily concerned with legal and regulatory compliance
   • BIt is limited to external threat actors and does not consider insider threats
   • CIt focuses solely on technical indicators such as IP addresses and file hashes
   • DIt involves the collection, analysis, and dissemination of information about threats to support decision-making
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A CTI team is in the middle of an intelligence cycle. The team has collected a large amount of data from various sources and is now processing it to remove duplicates and format it for analysis. The team has not yet defined formal intelligence requirements. What is the MOST likely consequence of this approach?

   • AThe team will produce a report that is not aligned with the organization's needs and may be ignored by decision-makers.
   • BThe team will be able to collect more data in future cycles because it has established a baseline.
   • CThe team will be able to produce a more comprehensive report because it has more data.
   • DThe team will save time by not having to consult with stakeholders about their needs.
   Reveal Solution Discussion Select an answer first